On-disk encryption (Magma)

The key management is likely to be something that NS Server will be the interface for, which typically will use external key stores.  We need to ensure that the encryption used is capable of FIPS certification, so we need to use specific algorithms (typically AES) and use a certified encryption library to perform this.

For magma, the first task is to understand the scope and then determine how to handle the encryption key.